RTBF alert: fake itsme messages in circulation
•
23 Jul 2025 •
Reading time: 3 minutes In Belgium, the itsme app has become the digital passport for more than 7 million users. Whether you use it to access your bank, manage your administrative documents or connect to an approved online casino, its promise is simple: easy identification, reliable authentication. But this growing popularity has a downside: fraudsters have it in their sights. Taking advantage of the summer period, which is a busy time for online purchases and bookings, fraudsters are redoubling their ingenuity to encourage users to wrongly validate actions via the application.
The classic scenario of a well-practised fraud
According to a recent warning from RTBF, the mechanics are almost always the same: a message or call is presented as coming from a bank, Cardstop or even an online gambling site. The tone is urgent and alarming, and the victim is asked to act quickly via itsme to solve a supposed problem.
But by agreeing to validate an uninitiated action, the door is wide open to fraudulent transactions.
The trap also extends to online casinos
Legal online casinos in Belgium often offer the option of connecting via itsme. This is a guarantee of security for the user… provided that the connection is legitimate.
In reality, some fraudsters exploit this channel to encourage players to authenticate themselves quickly, often under the guise of an exceptional win, an exclusive promotional offer or an account check. The result: the victim unwittingly accesses a false platform and unknowingly passes on their data to a malicious third party.
Simple but crucial reflexes
To protect yourself, it is essential to adopt a few basic reflexes. Official institutions, such as banks or Cardstop, will never ask you to validate an urgent action by telephone via itsme. Similarly, any unusual or overly tempting message should immediately arouse suspicion.
Before any validation in the application, read the information displayed on the screen carefully: it always specifies the exact action and the name of the department concerned.
If in doubt or if you make a mistake: react quickly
If you think you’ve been tricked, it’s essential to react quickly:
- Contact your bank immediately.
- Report the incident to www.safeonweb.be.
- If your card has been used fraudulently, call Cardstop (078 170 170).
- Change your login details and monitor your accounts closely.
Reliable technology, but human vigilance essential
It is important to stress that the security of itsme is not in question. The flaw lies elsewhere: in the human element, not in the tool. Scammers rely on panic, haste and confusion to deceive their target.
As the RTBF report reminds us, caution is the best protection. If in doubt, it’s best not to validate anything, ask questions and take the time to check. One click too many could cost much more than a simple digital faux pas.
The power of itsme lies in its ability to offer a reliable digital identity. But this power can backfire if the user loses control. In an age when fraud is becoming psychological, the first line of defence is you.